CVE-2026-83549

exploited in the wild☆ pin

CVSS

7.8

Reports

First seen

Sep 2, 2026

Last seen

Oct 9, 2026

Affected product

SonicWall SMA1000

Associated actors

Akira ×1 Carbonato ×1 EvilTokens ×1 Fire Ant ×1 INC Ransom ×1 Iran-linked threat actor ×1 Qilin ×1 Rhysida ×1 Sandworm ×1 ShinyHunters ×1 TeamPCP ×1 UTA0533 ×1 UTA0565 ×1

Recent reports

Critical

SonicWall NSM On-Prem and SMA1000 Series Multiple High-Risk Vulnerabilities (CVE-2026-78327, CVE-2026-83548, CVE-2026-83549)

NICS TaiwanSep 9, 2026 Critical

SonicWall SMA 1000 zero-days actively exploited; two pre-auth RCE vulnerabilities disclosed

CyberScoopSep 4, 2026 Critical

CISA Adds Seven Exploited Flaws to KEV Catalog as Attackers Deploy Reverse Shells and Crypto Miners

The Hacker NewsSep 3, 2026 High

SonicWall SMA1000 vulnerabilities CVE-2026-83548, CVE-2026-83549 exploited in the wild

Canadian Centre AlertsSep 2, 2026 High

CISA Adds Seven Known Exploited Vulnerabilities to Catalog

CISA AdvisoriesSep 2, 2026 Critical

SonicWall SMA 1000 Zero-Days Exploited in Active Attacks; CVE-2026-83548 and CVE-2026-83549

The Hacker NewsSep 2, 2026 Critical

SonicWall warns of actively exploited SMA1000 zero-day flaws

Bleeping ComputerSep 2, 2026 Critical

Multiple Vulnerabilities in SonicWall SMA1000 Series Products (CVE-2026-83548, CVE-2026-83549)

GovCERT.HKSep 2, 2026 Critical

SonicWall SMA1000 Critical SSRF and Command Injection Vulnerabilities (CVE-2026-83548/83549)

Sophos NewsSep 2, 2026

This page shows data on a 7-day delay. Free accounts get the full delayed feed; real-time reports, indicators, and the API start at $29/mo.

Associated actors

Recent reports

Max severity SonicWall SMA1000 flaw now exploited in attacks

SonicWall Patches CVSS 10.0 Pre-Authentication SSRF Flaw in SMA1000 Appliances

SonicWall warns of maximum-severity SSRF flaw in SMA1000 gateways

Cyber Brief 26-10 – September 2026

InfraTrust report warns network management systems under active attack